Privacy Policy

OCTAVE LAB respects your privacy and complies with EU Regulation 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controller

OCTAVE LAB — contact: hello@octavelab.com.

2. Data we collect

Order data: name, shipping address, email, telephone, payment confirmation (we never see your card number).
Account data: email, password hash.
Browsing data: cookies for cart persistence, analytics (anonymized), and consented marketing pixels.

3. Why we process it

To fulfil orders (legal basis: contract performance).
To meet our tax and accounting obligations (legal basis: legal obligation).
To send transactional emails (legal basis: contract performance).
To send marketing emails (legal basis: explicit opt-in consent — you can unsubscribe at any time).

4. Who we share it with

Payment processors (Stripe / PayPal), shipping carriers (SEUR / DHL / GLS), and our email service provider (Klaviyo). Each is bound by a Data Processing Agreement and operates within the EU/EEA or under Standard Contractual Clauses.

5. Retention

Order data: 6 years (tax law). Marketing data: until you unsubscribe. Account data: until you delete the account.

6. Your rights

Access, rectification, erasure, restriction, portability, objection. Write to hello@octavelab.com. If you believe we have not honored your rights you may complain to the Spanish Data Protection Authority (AEPD) at www.aepd.es.

7. Cookies

We use strictly necessary cookies (cart, checkout) without consent and analytics/marketing cookies only after you accept the cookie banner. You can withdraw consent at any time from the banner footer link.